
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
File: f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa (raw, json)
Hash identifier: 4Avp65bC2wQVQZROlevxUt9tUNXFL0Uriw8y9H/Dnao=
Subject key identifier: 35:B5:88:6E:59:37:96:30:B3:AC:50:18:4E:A3:2C:E9:8C:85:69:59
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 58974EA47A23C851C6193BBFE507AD972FF338BA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
Signing time: Tue 19 May 2026 04:20:07 +0000
ROA not before: Tue 19 May 2026 04:20:07 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e000::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:97:4e:a4:7a:23:c8:51:c6:19:3b:bf:e5:07:ad:97:2f:f3:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:20:07 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=bd2f804f49068f1a7906947f79f590a6cc3eef38668229b5f39e1dddee55e211, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:d1:99:9a:9c:d4:33:b9:5b:c6:85:bf:bc:
20:0a:39:96:62:bb:e9:6a:0b:12:1d:e7:b1:7c:3b:
56:c9:f7:9c:1a:75:db:38:a8:1c:c8:41:56:22:0e:
d0:64:b7:3f:71:e7:e2:03:08:ff:83:85:b3:5b:8f:
14:d9:0f:c6:b1:fe:28:00:9b:1a:c3:7f:3b:df:47:
e1:7e:77:c8:e3:46:55:f4:b6:53:c0:23:f1:31:c1:
a9:a1:7a:23:85:76:28:dc:35:c9:eb:07:20:ab:a7:
24:29:ea:33:99:f5:f1:23:d8:5d:29:b1:ab:83:4e:
99:fb:4b:f5:fa:85:a7:28:78:b4:d7:1c:0b:9f:3f:
22:fb:03:b3:b2:b0:d2:10:e8:ef:d6:24:42:72:16:
bd:47:cc:b5:09:87:f8:67:b7:34:bd:61:fe:5a:ce:
6e:d7:9f:11:06:ad:d4:bc:f8:b2:3c:76:21:ec:a9:
95:9e:51:6d:e6:0c:56:d3:83:6a:9b:ab:04:76:b3:
70:4f:7b:0c:2c:b5:8e:14:6f:26:8a:d8:f7:f2:b9:
75:da:2f:80:cc:df:dc:f0:6b:11:30:6b:05:5c:b5:
e0:c2:de:6d:22:5b:8d:18:7f:f7:39:4e:e4:d5:be:
81:98:9e:28:6f:0b:07:a5:e7:47:d0:61:dd:7b:d4:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:88:6E:59:37:96:30:B3:AC:50:18:4E:A3:2C:E9:8C:85:69:59
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e000::/42
Signature Algorithm: sha256WithRSAEncryption
3c:23:4a:d0:b9:af:92:9a:4d:09:d1:f0:f8:f4:c8:69:07:82:
37:72:ef:f4:d9:e2:62:47:d6:aa:4d:15:b4:d1:58:47:37:9c:
ee:a8:3c:8f:cd:bc:ad:ed:15:94:00:83:b8:9c:9e:6f:66:4f:
1f:e9:b2:3c:b2:b3:2b:26:13:b2:66:96:c3:61:a1:90:ae:d9:
19:73:58:b4:5b:01:af:c3:d9:a4:a4:0b:b6:da:dd:09:b7:77:
6f:34:14:31:62:43:bc:65:fb:be:18:48:ab:8a:f8:d7:97:0e:
56:e2:62:dc:e0:d2:38:55:e3:b5:ec:e1:e4:cf:c7:76:de:24:
3d:97:1c:a5:0b:0f:4c:19:d4:e6:d9:7b:2d:03:89:6b:f6:dc:
a0:4e:1d:a6:3a:d3:c3:09:20:5a:00:80:e1:a5:3b:8a:24:e9:
ab:4b:72:74:8c:f3:30:fb:28:0e:6b:a9:1e:79:0f:6f:1c:30:
7b:88:17:1a:dc:91:e1:26:18:93:41:9d:a2:bc:31:18:09:dc:
5a:41:28:85:b8:01:a6:37:df:69:31:f1:ed:81:90:ed:b3:70:
4b:36:a2:42:f5:4d:b6:9c:dd:f2:3e:02:7a:82:4e:eb:59:93:
c7:14:79:29:16:bf:40:a1:1a:11:ea:af:db:97:ea:44:35:e3:
3e:aa:dc:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:42:03 2026 by rpki-client